Privacy policy

Who we are

tonyklinger.com is run by Tony Klinger. When this policy says “we” or “us”, it means the team behind the site, which decides how your information is used. To reach us about anything in this policy, use the contact page.

What we collect

What you give us. Your name and email address; the details you enter when you create an account, buy something, book a session, register for an event or send an enquiry; and anything you choose to add to your profile.

What your purchases create. Orders, receipts, memberships, what you have access to, your bookings and event tickets (including when you checked in at an event), any waiting list you join, and your progress through courses, so the site can give you what you paid for.

What is collected automatically. Your IP address, browser and device, and the pages you ask for, as part of serving the site and keeping it secure. We do not run advertising trackers or build a profile of you.

Why we use it

Each use has a lawful basis under UK data protection law:

Your account and purchases

To provide the service you signed up for or bought (contract).

Service emails

Receipts, booking confirmations, membership changes and security notices (contract).

Security

To keep accounts safe and the site free of abuse and spam (legitimate interests).

Records

To keep the financial records the law requires (legal obligation).

News and offers

Only where you have agreed, or, as a customer, about our own similar offers with a way to refuse in every message (consent, or soft opt-in).

Service email and marketing are different

Receipts, booking confirmations and account notices are part of the service and keep arriving whether or not you take marketing. News and offers are separate: turn them off at any time in your account's notification settings, or through the unsubscribe link in every such email. We keep a record of when and how you agreed, so we can show it if asked.

Who else is involved

A few trusted services do part of the work for us, under contract and only on our instructions:

Stripe

Takes payments. Card details go to Stripe, not to us.

Supabase

Stores your account and the content you have access to.

Brevo

Sends our email.

Vercel

Hosts the site.

Cloudflare

Runs the security check on our contact form.

Google

Only if you choose “Continue with Google” to sign in.

Video players

Lesson and film videos are played by their hosts (Livid, Vimeo or YouTube, the last in its privacy-enhanced mode) once you press play.

Some of these providers may process data outside the UK. Where they do, they rely on the safeguards UK law requires, such as adequacy regulations or standard contractual clauses.

We do not sell your information, and we do not share it for anyone else's marketing.

How long we keep it

Account, order and booking records are kept while your account is open, and afterwards for as long as we are required to keep financial records. Enquiries are kept while they are useful for helping you. Marketing consent records are kept for as long as we might need to show that you agreed.

Keeping it safe

Passwords are never stored in readable form, the site is served only over encrypted connections, and each account can reach only its own information. You can add a second sign-in step from your account's security page.

Your rights

You can ask us to:

• give you a copy of what we hold about you
• correct anything that is wrong
• delete your information, where we are not required to keep it
• stop or limit a use you object to, including all marketing
• hand your information to you in a portable format

Write to us through the contact page and we will reply within one month. If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy as the site changes. The date at the top shows when it was last reviewed.